test-driven-development
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read user-provided code and execute tests, which constitutes an indirect prompt injection surface.
- Ingestion points: Project files and test scripts read during the Red-Green-Refactor cycle.
- Boundary markers: No specific delimiters or instructions to ignore embedded content are provided.
- Capability inventory: Shell execution of test runners like npm, pytest, and cargo.
- Sanitization: No explicit sanitization of code inputs or test outputs is specified.
Audit Metadata